1,672 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.
1,672
Total Actions
16
Jurisdictions
$50.5B+
Total Fines Tracked
McKenzie Memorial Hospital (Healthcare Provider, MI) reported a HIPAA breach affecting 58,839 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Gastroenterology Consultants of South Texas (Healthcare Provider, TX) reported a HIPAA breach affecting 44,579 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Blue Shield of California (Health Plan, CA) reported a HIPAA breach affecting 783 individuals. Breach type: Unauthorized Access/Disclosure. Location of breached information: Laptop, Network Server, Other.
Kettering Adventist Healthcare (Healthcare Provider, OH) reported a HIPAA breach affecting 501 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Texas Attorney General Ken Paxton secured a record-setting $1.4 billion settlement with Meta for unlawfully capturing and using the biometric data of millions of Texans, marking one of the largest privacy settlements in U.S. history.
$1.4B
Dr. Michael Bilikas and Associates d.b.a. 32 Pearls (Healthcare Provider, WA) reported a HIPAA breach affecting 23,517 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Texas Attorney General Ken Paxton announced a comprehensive privacy enforcement initiative, achieving record settlements with Meta ($1.4B) and Google ($1.375B) for biometric and geolocation data violations, suing General Motors and TikTok, and investigating numerous companies for children's data and AI practices. The AG's office has enforced multiple Texas privacy laws and registered over 200 data brokers.
$2.8B
OrthoAtlanta LLC (Business Associate, GA) reported a HIPAA breach affecting 626 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Infinite Services, Inc. (Healthcare Provider, NY) reported a HIPAA breach affecting 31,742 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Equilibria Mental Health Services (Healthcare Provider, PA) reported a HIPAA breach affecting 3,232 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Keys Pathology Associates, PA (Healthcare Provider, FL) reported a HIPAA breach affecting 20,000 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
The Brien Center for Mental Health and Substance Abuse Services (Healthcare Provider, MA) reported a HIPAA breach affecting 5,427 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Human Development Services of Westchester (Healthcare Provider, NY) reported a HIPAA breach affecting 501 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Oregon Specialty Group (Healthcare Provider, OR) reported a HIPAA breach affecting 3,337 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Self Regional Healthcare (Healthcare Provider, SC) reported a HIPAA breach affecting 26,696 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Connecticut Attorney General settled with Capulet Entertainment over the failed Capulet Fest 2024, which was abruptly relocated and partially cancelled, leaving ticketholders without refunds. The settlement provides up to $50,000 in consumer refunds and imposes future requirements including performance bonds and contractor commitments.
Mid South Rehab Services Inc. (Healthcare Provider, MS) reported a HIPAA breach affecting 1,316 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Williamsburg Area Medical Assistance Corporation d/b/a Olde Towne Medical and Dental Center (OTMDC) (Healthcare Provider, VA) reported a HIPAA breach affecting 2,567 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Regency Oaks (Healthcare Provider, FL) reported a HIPAA breach affecting 2,008 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Freedom Square of Seminole (Healthcare Provider, FL) reported a HIPAA breach affecting 3,473 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Picis Clinical Solutions, Inc. d/b/a Medstreaming (Business Associate, MA) reported a HIPAA breach affecting 500 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Anne Arundel Dermatology (Healthcare Provider, MD) reported a HIPAA breach affecting 1,905,000 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Freedom Plaza Senior Living (Healthcare Provider, FL) reported a HIPAA breach affecting 4,847 individuals. Breach type: Hacking/IT Incident. Location of breached information: Email.
Covenant Health (Business Associate, MA) reported a HIPAA breach affecting 7,864 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Florida Attorney General James Uthmeier launched an investigation into Robinhood Crypto, LLC for allegedly deceptive practices regarding trading costs. The AG issued a subpoena seeking internal documents to determine if Robinhood violated Florida's Deceptive and Unfair Practices Act by falsely claiming to offer the lowest crypto trading costs. Robinhood must respond by July 31, 2025.
Mountain Laurel Dermatology (Healthcare Provider, NC) reported a HIPAA breach affecting 3,324 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Massachusetts Attorney General settled with Earnest Operations LLC for $2.5 million over allegations that the student loan lender's use of AI underwriting models led to disparate impact on Black, Hispanic, and non-citizen applicants. The company failed to test its AI models for bias, used discriminatory variables like Cohort Default Rate, and sent inaccurate adverse action notices. Earnest must pay the fine, discontinue problematic practices, and implement compliance measures.
$2.5M
Naper Grove Vision Care (Healthcare Provider, IL) reported a HIPAA breach affecting 501 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Florida Lung, Asthma & Sleep Specialists (FLASS) (Healthcare Provider, FL) reported a HIPAA breach affecting 10,000 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
Ascension Health Services LLC dba Alpha Wellness & Alpha Medical Centre (Healthcare Provider, GA) reported a HIPAA breach affecting 1,714 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
All data sourced from official government enforcement pages.